Bug bounty program
AV
Alibaba VDP
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains934,471
| Name | Scope | First seen |
|---|---|---|
| api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| cdq-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| cim-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| cim-api-dev.alibaba-work.1688.comapi, dev | In scope | 2026-11-14 |
| cim-api-qa.alibaba-work.1688.comapi, test | In scope | 2026-11-14 |
| cim-api-uat.alibaba-work.1688.comapi, test | In scope | 2026-11-14 |
| gws-api-sandbox.alibaba-work.1688.comapi, test | In scope | 2026-11-14 |
| ks-inventory-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| ks-invoice-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| ks-limits-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| ks-order-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| ks-program-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| vendor-api.alibaba-work.1688.comapi | In scope | 2026-11-14 |
| api.alibaba.1688.comapi | In scope | 2026-11-14 |
| cdq-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| cim-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| cim-api-dev.alibaba.1688.comapi, dev | In scope | 2026-11-14 |
| cim-api-qa.alibaba.1688.comapi, test | In scope | 2026-11-14 |
| cim-api-uat.alibaba.1688.comapi, test | In scope | 2026-11-14 |
| gws-api-sandbox.alibaba.1688.comapi, test | In scope | 2026-11-14 |
| ks-inventory-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| ks-invoice-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| ks-limits-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| ks-order-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| ks-program-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| vendor-api.alibaba.1688.comapi | In scope | 2026-11-14 |
| api.1688.comapi | In scope | 2026-11-14 |
| api-2018.1688.comapi | In scope | 2026-11-14 |
| api-dev.1688.comapi, dev | In scope | 2026-11-14 |
| api-test.1688.comapi, test | In scope | 2026-11-14 |
| api1.1688.comapi | In scope | 2026-11-14 |
| api2.1688.comapi | In scope | 2026-11-14 |
| api3.1688.comapi | In scope | 2026-11-14 |
| apis.1688.comapi | In scope | 2026-11-14 |
| cdq-api.1688.comapi | In scope | 2026-11-14 |
| cim-api.1688.comapi | In scope | 2026-11-14 |
| cim-api-dev.1688.comapi, dev | In scope | 2026-11-14 |
| cim-api-qa.1688.comapi, test | In scope | 2026-11-14 |
| cim-api-uat.1688.comapi, test | In scope | 2026-11-14 |
| luat03-mbp-apis-rk-b.digital.lloydsbank.co.uk.ed88.cn.1688.comapi | In scope | 2026-11-14 |
| dev-api.1688.comapi, dev | In scope | 2026-11-14 |
| api.dev.1688.comapi, dev | In scope | 2026-11-14 |
| api.ext.1688.comapi | In scope | 2026-11-14 |
| gws-api-sandbox.1688.comapi, test | In scope | 2026-11-14 |
| api.int.1688.comapi | In scope | 2026-11-14 |
| ks-inventory-api.1688.comapi | In scope | 2026-11-14 |
| ks-invoice-api.1688.comapi | In scope | 2026-11-14 |
| ks-limits-api.1688.comapi | In scope | 2026-11-14 |
| ks-order-api.1688.comapi | In scope | 2026-11-14 |
| ks-program-api.1688.comapi | In scope | 2026-11-14 |
| h5api.m.1688.comapi | In scope | 2026-11-14 |
| h5api-src.m.1688.comapi | In scope | 2026-11-14 |
| origin-api.1688.comapi | In scope | 2026-11-14 |
| rpc.1688.comapi | In scope | 2026-11-14 |
| soap.1688.comapi | In scope | 2026-11-14 |
| api.staging.1688.comapi, staging | In scope | 2026-11-14 |
| api.test.1688.comapi, test | In scope | 2026-11-14 |
| vendor-api.1688.comapi | In scope | 2026-11-14 |
| webservice.1688.comapi | In scope | 2026-11-14 |
| webservices.1688.comapi | In scope | 2026-11-14 |
| api.ais.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.alimesh.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.alibaba-inc.comapi | In scope | 2026-11-14 |
| api-portal.alibaba-inc.comapi | In scope | 2026-11-14 |
| api-qradar.alibaba-inc.comapi | In scope | 2026-11-14 |
| dialogue.api.alibaba-inc.comapi | In scope | 2026-11-14 |
| test.api.alibaba-inc.comapi, test | In scope | 2026-11-14 |
| xline.api.alibaba-inc.comapi | In scope | 2026-11-14 |
| cdnsec-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| daily-edge-paas-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| dchain-api-proxy.alibaba-inc.comapi | In scope | 2026-11-14 |
| wildcard.dchain-api-proxy.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.dw.alibaba-inc.comapi | In scope | 2026-11-14 |
| dataservice-api.dw.alibaba-inc.comapi | In scope | 2026-11-14 |
| pre-datastudio-api.dw.alibaba-inc.comapi | In scope | 2026-11-14 |
| pre-datastudio2-api.dw.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.dy-skyeye.alibaba-inc.comapi | In scope | 2026-11-14 |
| edge-paas-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.fed.alibaba-inc.comapi | In scope | 2026-11-14 |
| fie-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| api-daily.huadongai.alibaba-inc.comapi | In scope | 2026-11-14 |
| hyperml-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| hyperml-api-dev.alibaba-inc.comapi, dev | In scope | 2026-11-14 |
| api.idb4.alibaba-inc.comapi | In scope | 2026-11-14 |
| webservice.it.alibaba-inc.comapi | In scope | 2026-11-14 |
| api-external-edge.kunlunapi.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.smartcall.lazada.alibaba-inc.comapi | In scope | 2026-11-14 |
| livepilot-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.m.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.nightwatch.alibaba-inc.comapi | In scope | 2026-11-14 |
| ons-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| ons-api4pre.alibaba-inc.comapi | In scope | 2026-11-14 |
| openapi.alibaba-inc.comapi | In scope | 2026-11-14 |
| pre-dchain-api-proxy.alibaba-inc.comapi | In scope | 2026-11-14 |
| wildcard.pre-dchain-api-proxy.alibaba-inc.comapi | In scope | 2026-11-14 |
| rap2api.alibaba-inc.comapi | In scope | 2026-11-14 |
| s-api.alibaba-inc.comapi | In scope | 2026-11-14 |
| sec-openapi.alibaba-inc.comapi | In scope | 2026-11-14 |
| api.sm.alibaba-inc.comapi | In scope | 2026-11-14 |
| std-api-server.alibaba-inc.comapi | In scope | 2026-11-14 |
710,334 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.